[Opendnssec-user] key rollover in ODS

Sion Lloyd sion at nominet.org.uk
Tue Aug 10 07:56:33 UTC 2010


> I have a question about key rollover in ODS.
> 
> Does ODS support Double-Signature Method for ZSK and Double-RRset for KSK?
> 
> Methods are described in
> http://tools.ietf.org/html/draft-morris-dnsop-dnssec-key-timing-02

Hi,

currently ODS does not have configurable key rollover mechanisms; but they are 
planned for KSKs. I'm not sure if we will implement alternative rollover 
schemes for ZSKs, it is not planned at the moment.

Sion



More information about the Opendnssec-user mailing list